Whmcs

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Whmcs records in CISA KEV

No Whmcs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Whmcompletesolution 4 records LOW Group Pay 1 record LOW Whmcs 1 record LOW

Records

1 record in Group Pay · all components

TI-2013-03093 CVE-2013-3536 · GHSA-2qx8-wpx3-85rf

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in…

LOW 37

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and earlier for WHMCS allows remote attackers to execute arbitrary SQL commands via the hash parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02237 Published 2013-05-13 No fix listed CWE-89

Open these records in search →

Critical	0
High	3
Medium	3
Low	0
No CVSS	0